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(54) APPARATUS FOR DATA DISTRIBUTION, AND TERMINAL FOR DATA DISTRIBUHON 



(57) A contents database in which data of contents 
enciphered by a C key and the C key are stored is pro- 
vided for a contents server. The contents data enci- 
phered by the C key and the C key are enciphered by an 
M key and sent to a user machine. In the user machine, 
the contents data enciphered by the C key and the C 
key are stored in a storage device. Upon reproduction, 



the contents data enciphered by the C key and the C 
key from the storage device are sent to an encipher- 
ing/decoding processing unit and decoded and charg- 
ing is performed in accordance with the C key. A DA 
code which dynamically changes with the elapse of time 
is added to the C key 
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Description 
Technical ReJd 

[0001] The invention relates to an infornnation dis- 
trilxjting system comprising: a contents server in wrtiich. 
for example, a plurality of music data is accumulated; 
and a user machine to which desired contents is distrft>- 
uted from contents accumulated in the contents server 
Particularty, the invention relates to a protection and 
charging of contents. 

Backgrourtd Art 

[0002] In recent years, various services using a 
computer network are being realized owing to the 
spread of Internet and a satellite communication. As 
one of the s^ces using such a computer network, a 
system for performing the following music distritxrting 
service has l>een proposed. 

[0003] tn Rg. 14, reference numeral 501 denotes a 
contents server and 502 indicates a user machine. A 
plurality of music data has been accumulated as con- 
tents in the contents server 501 . A storage device 504 
such as hard c&sk drive, optical d^ drive, or the like is 
connected to the user machine 502 and a card 
reader^v^rter 505 for charging is also connected thereto. 
A canj 506 is loaded into the card readerAwriter 505. 
[0004] In case of using the music distributing serv- 
ice, the user machine 502 is connected to the contents 
server 501 through a transmission path 503. The trans- 
mission path 503 is, for example, a computer network 
such as Internet When the user nnachine 502 is con- 
nected to the contents server 501 , a list of contents or a 
search picture plane is s^ from the contents server 
501 to the user machine 502. 

[0005] The user searches desired contents by the 
list of contents or search picture plane arxl selects con- 
tents to be downloaded. When the user selects the con- 
tents, a requesting command of the contents is sent 
from the user machine 502 to the contents server 501 . 
In the contents server 501 , the contents is taken out in 
response to the requesting command arxJ this contents 
is transmitted from the contents server 501 to the user 
machine 502. The contents is stored into the storage 
device 504 of the user machine 502. At this time, proper 
charging is performed by the card reader/writer 505. 
[0006] If such a music distributing system is spread, 
the user can easily obtain the music data of a desired 
music piece via a oomrruinication. A server in such a 
system is equi^ed with a searching function. By using 
such a searching function, the user can easily search a 
desired music piece and obtain it. Further, in the server 
in such a system, since the music data is always 
updated, a latest music piece can be early otrtained. 
[0007] However, in a system such that the music 
data is distributed from the server to the user machine 
as mentioned above, there is a danger that the data of 



the contents is copied without permission and the right 
of author is not protected. Therefore. H is necessary to 
add a function for prevention of copy so that the data of 
the contents is not copied without permission and to 

5 perform proper charging for the contents. 

[0008] In such a system, tt ts considered to repro- 
duce the downloaded music data by another equipment 
or transfer it to other people. If the system is constructed 
so that the data of the contents is always moved to only 

10 one equipment, there is no possibility that an illegal 
copy is di^'buted. However, if the copy to the other 
equipment is perfectly inhibited, such a movement of 
the data of the contents cannot be performed as well. 
[0009] In a system which can disb-ibute contents, 

15 tiieretore, it is an object of the invention to provide an 
information distrOsuting system which can sufficiently 
protect the contents and perform legal charging. 

Disclosure of Invention 

20 

[001 0] According to the invention, there is provided 
a data distributing apparatus comprising: 

a first storing unit in which first identification data 
25 that is peculiar to equipment and secorwi identifica- 
tion data corresponding to the first identification 
data have been stored; 

a first transmitting/receiving unit for transmitting dis- 
tribution request data of data together with the first 

30 identification data read out from the first storing unit 
arxl receiving the transmitted data: 
a first data storing unit for stoing the data received 
by the first transmitting/receiving unit; 
a first signal processing unit for performing a 

35 decoding process to the data read out from the first 
data storing unit on the basis of the second identifi- 
cation data stored in the first storing unit; 
a first control unit for performing an operation to 
allow the data received by the first transmit- 

40 ting/receiving unit to be stored into tiie first data 
storing unit arxl oonb-olling the decoding processing 
operation by the first signal processing unit of the 
data read out from the first data storing unit: 
a second transmitting/receiving unit for receiving 

45 the first identification data and tiie distribution 
request data which were transmitted from the first 
transmitting/receiving unit and transnrtitting the 
data: 

a secorxl data storing unit in which a plurality of 
so data is stored and which outputs data corresporxl- 
ing to the distrilsution request data; 
a secorxl storing unit in which the second identifica- 
tion data corre^3onding to the transmitted first iden- 
tification data has been stored; 
55 a second signal processing unit for performing an 
enciphering process to the data outputted from the 
second data storing unit on the basis of the second 
identification data read out from the second storing 
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unit; and 

a second control unit for performing a reading con- 
trol of the second identification data from the sec- 
ond storing unit on the basis of the distntxition 
request data and the first identification data which 5 
were transmitted and performing a reading control 
of the data from the second data storing unit on the 
tsasis of the distrfltxjtion request data, 
wherein the data enc9}hered on the basis of the 
second identification data transmitted through the 
second transmitting/receiving unit is decoded by 
the first signal processing unit 

[001 1 ] According to the invention, there is provided 
a data distributing apparatus comprising: 

at least one terminal equipment section having a 
first storing unit in which first iderrtif rcation data that 
is peculiar to equipment and second identification 
data con^esponding to the first identification data 
have been stored, a first toansmitting^eceiving unit 
for transmitting distribution request data of data 
together with the first identification data read out 
from the first storing unit and receiving the transmit- 
ted data, a first storing unit for storing the data 
received by the first transmitting/receiving unit, a 
first signal processing unit for performing a decod- 
ing process to the data read out from the first data 
storing unit on the basis of the second identification 
data stored in the first storing unit, and a first control 
unit for performing an operation to allow the data 
received by the first transmittingA'eceiving unK to be 
stored into the first data storing unit and controlling 
the decoding processing operation by the first sig- 
nal processing unit of the data read out from the 
first data storing unit: and 

a server apparatus section having a second trans- 
mitting/receiving unit, connected to the terminal 
equipment section through a transmission path, for 
receiving the first identification data and the distri- 
bution request data which were transmitted from 
the first transmttting/receiving unit arxJ transmitting 
the data, a secorxj data storing unit in which a plu- 
rality of data is stored and which outputs data corre- 
sponding to the distrttxjtion request data, a second 
storing unit in which the second identification data 
corresponding to the transmitted first identification 
data has been stored, a second signal processing 
unit for performing an enciphering process to the 
data outputted from the secorxJ data storing unit on 
the basis of the second identification data read out 
from the second storing unit, and a second conti-d 
unit for performing a reading control of the second 
identification data from the second data storing unit 
on the basis of the cfistribution request data and tiie 
first identification data which were transmitted and 
performing a reading control of the data from the 
second storing unit on the basis of the distribution 



request data. 

wherein the data enciphered on the basis of the 
second identification data transmitted through the 
second transmitting/receiving unit is decoded by 
the first signal processing unit. 

[0012] According to the inverrtion, tiiere is provided 
a terminal apparatus for data distribution, corpprising: 

a storing unit in which first identification data that is 
peculiar to an apparatus and second identification 
data corresponding to the first identification data 
have been stored; 

a data transmitting/receiving unh for transmitting 
cfistribution request data of data together with the 
first identification data read out from the storing unit 
and receiving data which was enciphered by the 
second identification data and transmitted; 
a data storing unit for storing the data which 
aiciphered on the basis of the secorvJ identification 
data and received by the data transmitting/ireceiving 
unit; 

a signal processing unit for performing a decoding 
process to the data read out from the data storing 
unit on the basis of the second identification data 
stored in the storing unit; and 
a control unit for performing the operation to store 
the data received by the data transmittingA^eceiving 
unit into the data storing unit and controlling the 
decoding processing operation by ttie signal 
processing unit of the data read out from the data 
storing unrt. 

Brief Description of Drawings 

[0013] Fig. 1 is a k>lock diagram for use in explana- 
tion of a system using an M key in a data distributing 
system to which the invention can be applied. Rg. 2 is a 
tAotk c£agram for use in explanation of an encipher- 
ing/decoding processing unit of the system using the M 
key in the data distritxiting system to which tiie invention 
can be applied. Fig. 3 is a block diagram for use in 
explanation of a system using a C key in the data distrib- 
uting system to which the invention can be applied. Rg. 
4 is a block diagram for use In explanation of an enci- 
phering/decoding processing unit of the system using 
the C key in the data distributing system to which the 
invention can be applied. Rg. 5 is a flowchart for use in 
explanation of the system using the C key in the data 
distributing system to which tiie invention can be 
applied. Fig. 6 is a block diagram for use in explanation 
of a system using a T key in a data distrbuting system 
to which the invention can be applied. Rg. 7 is a block 
diagram for use in explanation of an enciphering/decod- 
ing processing unit of the syst^ using tiie T key in the 
data distributing system to which the Invention can be 
applied. Figs. 8A and 8B are block diagrams for use in 
explanation of the enciphering/decoding processing unit 
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in the system using the T key in the data distributing 
system to which the invention can be applied. Fig. 9 is a 
block diagram for use in explanation of a system using a 
DA code in a data distributing system to which the 
invention can be applied. Rg. 10 is a schematic diagram 
for use in explanation of the DA code. Fig. 11 is a block 
diagram for use In explanation of an enc^ering/decod- 
ing processing unit of the system using the DA code in 
the data distributing system to which the invention can 
be applied. Fig. 12 is a flowchart for use in explanation 
of the system using the DA code in the data distributing 
system to which the invention can be applied. Fig. 13 is 
a flowchart for use in explanation of the system using 
the DA code in the data distritxiting system to which the 
invention can be af^lied. Fig. 14 is a block cfiagram of 
an example of a conventional data distributing system. 

Best Mode for Carrying Out the Invention 

[0014] Embodiments of the invention will now be 
described hereint^elow with reference to the drawings. 
According to the invention, in a system for transferring 
data of contents, the data of contents can be protected 
and proper charging can be performed. Enciphering 
keys and codes which are used in the system will be 
first simply described. 

1 . Description of keys arwl codes 

[0015] In the system to which the invention is 
applied, the following enciphering keys and codes are 
used. 

(1) M key 

[0016] A role of an M (Machine) key is to enable 
data to be used only by specific equipment, namely, a 
user machine, which will be described herein later. The 
M key is allocated to each equipment at the time of, for 
example, shipping the equipment from a factory arxi is 
enciphering irtforrr^on peculiar to each equipment. In 
order to protect the M key, it is emt^edded in. for exanv 
ple, an enciphering/decoding processing unit of the 
equipment and cannot be extracted to the outside of the 
equipment. 

(2) MID code 

[001 7] A peculiar MID (Machine kferrtification) code 
is allocated to each equipment. The MID code is also 
allocated to each equipment at the time of shipment 
from the factory. The MID code is used only to specify 
each equipment and is not directly used as an encipher- 
ing key. Tho-efore, even if it leaks to the outside, a risk 
that the data protection is ndt guaranteed is small. The 
MID code can t>e embedded in, for example, the enci- 
phering/decoding processing unit of the equipment in a 
manner similar to the M key or can be stored in the other 



ROM or EEPROM. 

(3) C key 

s [0018] A role of a C (Ck)ntents) key is to protect data 
every contents. In this in^nce. the contents denotes a 
unit of a group of nrK>vat>le information. That is, in a sys- 
tem for charging for data, the contents indicates a unit of 
information as a target of charging. In case of a music 

10 server, when the charge is performed every music 
piece, a unit such as music data of each music piece 
indicates data of one contents. 
[001 9] Each contents is enciphered by using the C 
key that is peculiar to each contents. Therefore, only in 

15 the equipment of the user side having the C key corre- 
sporwitng to the contents, the enayption of the conterrts 
can be decoded by using the C key and reproduced. As 
mentioned above, since tiie contents can be used only 
in tiie equipment of the user side having the C key, the 

20 0 key can be also regarded as a key indicating the right 
in which tiie contents can be used. 

(4) Tkey 

25 [0020] A role of a T (Transfer) key is to protect data 
when the data is moved between user equipment. 
When the contents is moved between the equipment, 
there is a possibility that the C key leaks to the outside. 
Therefore, when data is moved between the equipment, 

30 the C key and the corrtents enciphered by the 0 key are 
furtiier enciphered by the T key. 
[0021] The T key is an algorithm which has been 
predetermined between equipment on the data receiv- 
ing side and equipment on the data sending side and 

35 formed on the basis of tiie MID code. That is, when data 
of contents is moved between the equipment, the MID 
code on the receiving side is transmitted from the equip- 
ment on tiie receiving side to the equipment on the 
sending side. The T key is formed on the basis of the 

40 transmitted MID code in the equipment on the serxling 
side. In the equipment on the receiving side, the T key is 
formed on the basts of its own MID code by a similar 
algorithm. 

45 (5) DA code 

[0022] It is a dynamic authenticating code which is 
formed in an enciphering/decoding chip and is added to 
the C key. The DA code is formed by using, for exanple. 

so a random number, time code, and the like. If the DA 
code is added, by temporarily shunting the G key. It 
becomes impossible to illegally use the contents. By 
using the DA code, it is possible to permit/inhibit the use 
for a predetermined period of time or lend or borrow the 

55 contents. 
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2. System using the M key 

[0023] Fig. 1 shows an example of a data distribut- 
ing system to which the invention is applied. In this 
exarrple, an enciphering key called an M key is intro- 
duced, thereby enabling data to be used only by specific 
terminal equipment 

[0024] In Fig. 1 . a contents server 1 is connected to 
a user machine 2 through a transnrtission path 3. 
Although only one user machine 2 as terminal equip- 
ment which is connected to the contents server 1 
through the transmission path 3 is shown in Rg. 1 in 
order to simplify the description, a plurality of user 
machines 2 are actually connected to the server 1 via 
the transnriission path 3. A contents database 1 1 is pro- 
vided for the contents server 1. Data of contents pre- 
sented by the contents server 1 has been stored in the 
contents database 1 1 . 

[0025] The data of contents to be stored into the 
contents database 1 1 is inputted artd supplied from a 
contents input terminal 13. For example, in case of a 
server for performing a nrtusic distributing service, music 
data is supplied from the contents input terminal 13. 
The music data is stpplied to an encoder 1 4. The music 
data is compression encoded by the encoder 14 on the 
basis of a nrodified DCT (Modified Discrete Transform), 
namely, what is called ATRAC (Adaptive Transform 
Acoustic Coding) disclosed in, for example, JP-A-3- 
139923. JP-A-3-1 39922. or the like. The compressed 
music data is stored in the contents database 1 1. 
[0026] A code and key database 1 2 constructed by 
an RAM and a hard disk drive is provided for the con- 
tents server 1 . The MID codes and the M keys of the 
user machines 2 serving as all equipment connected to 
the contents server 1 are stored in the code and key 
datat>ase 12. The MID code is information peculiar to 
each user machine in order to identify each user 
machine 2. The M key Is the enciphering key peculiar to 
each user machine. The MID code and M key are allo- 
cated to each user machine 2, for example, at the time 
of shipment of the equipment from the factory. When the 
MID code and the M key are allocated to each user 
machine 2 at the time of shipment from the factory, data 
to be stored in the code and key database 1 2 is formed 
on the basis of the list of the MID code and M key allo- 
cated to each equipment. 

[0027] The whole operation of the contents server 1 
is managed by a server processing manager 1 6. A com- 
munication control of the contents server 1 is managed 
by a communication manager 15. The data from the 
contents server 1 is enciphered by an enciphering cir- 
cuit 17. The encipherment at that time Is performed on 
the t^asis of the M key retrieved from the code and key 
database 12 on the basis of the MID code transmitted 
from the user nrechine 2. 

[0028] On the other hand, an enciphering/decoding 
processing unit 21 is provided for the user machine 2 as 
terminal equipment. The ^iciphertng/decodtng 



processing unit 21 is constructed by an exdusive-use IC 
for performing an enciphering process of data and a 
decoding process of the encryption. An MID code artd 
an M key which are peculiar to the equipment are stored 

5 in the endpheringAJecocfing processing unit 21 at the 
time of shipment from the factory. 
[0029] Fig. 2 shows a construction of the encipher- 
ing/decoding processing unit 21. The encipher- 
ing/decoding processirig unit 21 comprises: an M key 

10 holder 51 ; an MID code holder 52; an M key decoding 
drcuit 53; and a controller 54. An M key as enciphering 
infomiation peculiar to each equipment is stored in the 
M key holder 51 at the time of shipment from the factory. 
An MID code as identification information F>eculiar to 

15 each equipment is stored in the MID code hokler 52 at 
the time of shipment from the factory- The controller 54 
cortrols the operation of the enciphering/decoding 
processing unit 21 . 

[0030] A command which is transmitted from a 

20 machine manager, which will be described hereiniater, 
is supplied to a conrvnarxl terminal CMD of the corrtrol- 
ler 54. The operation of the enciphering/decoding 
processing unit 21 is set on the basis of the command. 
The data of the contents enciphered by the M key is 

25 supplied to the M key decoding circuit 53 through an 
input terminal DATA_IN. The M key is supplied from tiie 
M key hokler 51 to the M key decoding circuit 53. TTie M 
key decoding circuit 53 deciphers the encryption of the 
data of contents SLpplied from the input terminal 

30 DATAJN. Output data of the M key decoding circuit 53 
is generated from a data output temriinal DATA_OUT. A 
code output terminal MID_OUT is led out from the MID 
code holder 52. An M ID code is outputted from the code 
output terminal MID.OUT 

35 [0031] As shown in Rg. 2. the enciphering/decod- 
ing process is performed by the enciphering/decoding 
processing unit 21 constructed by an IC of one chip. 
The M keys and MID codes have been stored in the 
enciphering/decoding processing unit 21. Therefore, it 

40 is impossSsle from the outside to soh/e how the enci- 
phering process was performed in the encipher- 
ing/decoding processing unit 21 and what is the 
enciphering key 

[0032] In Rg. 1 . an input as a result operated by the 
45 user is supplied from an input unit 22 to the user 
machine 2. The input from the input unK 22 is supplied 
to a machine processing manager 24 through a user 
interface 23. 

[0033] The machine processing manager 24 is con- 
so structed by a microcomputer or the like and performs 
the whole process of the user machine 2. When receiv- 
ing the input to obtain the contents of the contents 
server 1 from the input unit 22, tfie machine processing 
manager 24 supplies a command to the encipher- 
55 ing/decoding processing unit 21 and performs the oper- 
ation tor inquiring the MID code. When the command to 
inquire the MID code is supplied, the erKipher- 
ing/decoding processing unit 21 generates the MID 
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code stored in the MID code holder 52 (Fig. 2) to the 
rrenager 24 in response to the supplied command to 
irx^uire the MID. 

[0034] When the MID code is received from the 
enciphering/decoding processing unit 21, the machine s 
processing manager 24 transmits a distrtbuttng request, 
the MID code, and accounting information to a commu- 
nication manager 25. The distributing request. MID 
code, and accounting information are transmitted from 
the communication manager 25 of the user machine 2 io 
to the communication manager 15 of the contents 
server 1 via the transmission path 3. 
[0035] When a distn'bution service of the data of the 
contents from the contents server 1 is received, a card 
26 is loaded. Balance information of the card 26 is sent is 
to the machine processing manager 24 through a card 
reader/writer 27. When the distribution of the contents is 
executed, the machine processing manager 24 gener- 
ates a drawing instruction or a reducing instruction to 
the card 26 via the card reader/writer 27, and the cost 20 
corresponding to the distribution of the contents is 
deducted from the card 26. In this manner, payment of 
the cost for tiie distn'bution of the contents is performed 
to a company which distritxjted the contents. At that 
time, it is also possSdIe to discriminate whettier he Is a ss 
legal user or not and whether the user has certainly per- 
formed the charging or not and, thereafter, output the M 
key corresponding to the MID code transmitted from the 
user machine 2. 

[0036] On the contents server 1 side, the server so 
processing manager 16 constructed by a microcorrv 
puter or the like controls the whole processes of the 
server 1. When the communication manager 15 
receives the distiibuting request MID code, and 
accounting information which are transmitted from the ss 
user machine 2, the received distributing request, MID 
code, and accounting information are sent to the server 
processing manager 16. 

[0037] When the MID code transmitted from the 
user machine 2 is received, ttie server processing man- 40 
ager 16 serKfs the MID code to the code arxj key data- 
base 12 and supplies the command to inquire the M key 
of the user machine corresponding to the MID code 
transmitted from the user machine 2 to tiie database 12. 
As mentioned above, the MID code of each equipment 4s 
connected to the server 1 and the information of the M 
key conesponding to the MID code have previously 
been stored in the code and key database 1 2. When the 
MID code transmitted from the manager 16 is received, 
the code and key datal)ase 12 identifies the user so 
machine 2 from the transmitted MID code and outputs 
the M key corresponding to the user machine 2 which 
transmitted the MID code. The M key corresponding to 
the transmitted MID code is sent to the M key encipher- 
ing circuit 17. An enciphering key is set to the M key 55 
enciphering circuit 17 on the basis of the M key trans- 
mitted from the database 12. 

[0038] When the distiibuting request from the user 



machine 2 is received, the server processing manager 

16 sends a command Indicative of the distributing 
instruction of the requested contents to the contents 
database 1 1 . When the distributing insti^uction from the 
user machine 2 is received, the contents database 1 1 
reads out the data of the contents conesponding to the 
transmitted distn'buting instiuction. The data of the con- 
tents read out from the database 1 1 is sent to the M key 
enciphering circuit 17. 

[0039] The M key corresponding to the MID code of 
the equipment of the user machine 2 which requested 
the data has been set in the M key enciphering circuit 1 7 
from the code and key database 12. The data of the 
corttents which is transmitted from tiie contents data- 
t^ase 1 1 is enciphered by the M key erviphering circuit 

17 by the M key conesponding to the MID code of the 
user n^chine 2 mentioned above. The data of the con- 
tents enciphered by the M key is transmitted from the 
communication manager 15 of the contents server 1 to 
the communication manager 25 of tiie user machine 2 
through the transmission path 3. The data of the con- 
tents is accumulated in a storage device 20 in the user 
machine 2. In this case, a wire or radio communication 
network such as an ISDN (Integrated Services Digital 
Network) or the like can be used as a transmission path 
3. 

[0040] As mentioned above, when the distribution 
of the contents is requested from the user macNne 2 to 
the contents server 1, the MID code peculiar to the 
equipment of the user machine 2 is sent from the user 
rr^chine 2 to the contents server 1 . The code and key 
database 12 is provided for the contents server 1. The 
M key which corresponds to the MID code of the user 
machine 2 and was sent from the user machine 2 is 
called from the code and key database 12. The data of 
tiie contents read out from the database 11 is enci- 
phered by tiie M key. The data of the contents enci- 
phered by tiie M key that is peculiar to the user machine 
2 is sent to tiie user machine 2. The data of the contents 
which was enciphered is accumulated in tiie storage 
device 20 of the user machine 2. Since tiie data of tiie 
contents stored in the storage device 20 has been enci- 
phered by the M key peculiar to the equipment of the 
user machine 2, the dlsti^lbuted data of the contents 
cannot be decoded by equipment other than the user 
machine 2 which requested the distribution of the con- 
tents. Thus, the copyright of the contents which is dis- 
tributed from the server 1 to the user machine 2 can be 
protected. 

[0041] That is, in case of decoding the data of the 
contents stored In the storage device 20, the read-out 
data of the corttents is supplied from the storage device 
20 to the data input terminal DATAJN of the encipher- 
ingAdecodlng processing unit 21 In Fig. 2. As shown In 
Fig. 2. the M key peculiar to the equipment of the user 
machine 2 has been accumulated in die M key hokJer 
51 of the endphering/decocfing processing unit 21. 
Since the data of the corttents sent from the contents 
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server 1 has been enciphered by the M key correspond- 
ing to the MID code in the MID code holder 52. the M 
key set In the M key enciphering circuit 17 on the cot- 
tents server i side is simitar to the M key stored in the M 
key hdder 51 of the user machine 2. Therefore, the data 
of the cOTtents which was read out from the storage 
device 20 and erxaphered by the M key can be decoded 
by the encipha-ing/decoding processing unit 21 . 
[0042] On the other hand, it is now assumed that 
the data of the contents stored in the storage device 20 
was copied to a user machine or equipment ti\h& than 
the user machine 2. The data of the contents stored in 
the storage device 20 has been enciphered by the M 
key peculiar to the equipment of the user machine 2. 
TTie endphering/decoding processing unit 21 of the 
other equipment does not have the same M key as that 
of the equipment of the user machine 2 serving as a 
copying source. Therefore, even if the data of the con- 
tents stored in the storage device 20 is copied into the 
equipment other than ^e user machine 2 in which the 
data of the contents transmitted from the server 1 has 
been stored by sending a distributing request to the 
Inherent user machine 2, namely, server 1 , ^e encryp- 
tion of the data of the contents canrxjt be decoded in the 
equipment serving as a copying source. 

3. System using the C key 

C0043] By introducing the M key shown in Figs. 1 
arxl 2. the data of the contents can be used by only the 
specific equipment However, if only the M key is used, 
the data of the contents cannot be moved at all from the 
user macfiine in which the data of the contents distrib- 
uted from the server 1 has been stored to the other user 
machine or equipment Although there is considered a 
case where the right of the author is not protected if the 
data of the contents is copied as much as possible, if 
the data of the contents was merely moved, since this 
means that the equipment which uses the data of the 
contents is merely shifted to the other equipment, no 
problem occurs. As shown in Rgs. 1 arxl 2 mentioned 
above, according to the apparatus and method using 
only the M key, it is impossible to cope with the shift from 
certain equipment of the data of the contents to the 
other equipment namely, from a certain user machine 
to the other user machine as mentioned above. There is 
considered a situation that an error occurs in the data of 
the contents once stored in the user machine or the 
download of such data fails. In such a case, if the legal 
user performed the legaJ charging and received the dis- 
tribution of the data of the contents, it is desired to redis- 
tribute the data of the contents. Ttie contents include toll 
contents and toll-free contents and if only the M key is 
used, it is impossible to perform the proper charging in 
accordance with the kind of contents. 
[0044] As mentioned above, by irrtroducing the M 
key, the protection of the data of the contents for each 
user machine as each equipment as a unit and the pro- 



tection for the copy of the illegal contertts data can be 
aoconplished. However, if only the M key is used, it is 
insufficient to protect the data of each contents and per- 
form the proper charging. Therefore, an exanple in 
5 which a C key to encipher every contents is introduced 
will now be described with reference to Fig. 3 arxJ sub- 
sequent drawings. 

[0045] Fig. 3 shows an example of a data distribut- 
ing system introducing the C key. The C key has a role 

10 to protect data every contents. 

[0046] In the data distributing system introducing 
the C key, as an enciphering/decoding processing unit 
1 21 on the side of a user n^chine 1 02, in a manner sim- 
ilar to the enciphering/decoding processing unit 21 

75 shown in Rg. 2, as shown in Fig. 4. an M key holder 
151, an MID code holder 152, an M key decoding circuit 
1 53. and a controller 1 54 are provided. Further, a C key 
fetching circuit 1 55 and a C key decoding circuit 1 56 are 
provided for the processing unit 121. The operattons of 

20 the M key holder 151, MID code holder 152, M key 
decoding circuit 153, and controller 154 are similar to 
those of the encipher! ngAdecoding processing unit 21 in 
the data distributing system using onty the M key men- 
tioned above. The M key serving as enciphering infor- 
ms mation that is peculiar to the equipment of each user 
machine 102 is stored in the M key holder 151 at the 
time of shipment from the factory. The MID code serving 
as identification information that is peculiar to the equip- 
ment of each user machine 102 is stored in the MID 

30 code hoWer 152 at the time of shipment from the fac- 
tory. The controller 154 controls the operation of the 
enciphering/decoding processing unit 121. The C key 
fetching circuit 155 holds the C key decoded by decod- 
ing the M key. The C key decoding circuit 156 performs 

35 the decocfing process by the C key. 

[0047] A commarxi is supplied to the controll er 1 54 
from a machine processing manager, which will be 
explained hereinlater, through the command terminal 
CMD. The operation of the enciphering/decoding 

40 processing unit 121 is set on the basis of the command 
which is supplied from the command terminal CMD. The 
data which was enciphered by the C key and, further, 
enciphered by the M key is supplied from the input ter- 
minal DATAJN to the M key decoding circuit 153, and 

45 the C key enciphered by the M key is also supplied 
thereto from an input terminal KEY_IN. The M key is 
supplied from the M key holder 151 to the M key decod- 
ing circuit 153. 

[0048] If the enciphering key of the input data, 
so namely, the M key which enciphered the data which is 
supplied from the terminal DATAJN coincides with the 
M key from the M key holder 151, deciphering can be 
performed by the M key decoding circuit 1 53. The C key 
in which the encryption by the M key was deciphered 
55 and the data enciphered by the C key are outputted 
from the M key decoding circuit 153. The C key is held 
in the C key fetching circuit 1 55. The data enciphered by 
the C key is supplied to the C key decoding circuit 156. 
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[0049] In the C key decocfing circuit 1 56. the decod- 
ing process based on the C key is performed arxl the 
data enciphered by the C key is decoded. Output data 
from the C key decoding drcuit 156 is outputted from 
the data output terminal DATA_OUT The code output 
termina) MIDjOUT is led out from the MID code holder 
152. The MID code is outputted from the code output 
terminal MID_OUT. To transfer the data enciphered by 
the C key. an output terminal KEY_OUT of the C key 
and an output terminal DATA_T of the data of the con- 
tents enciphered by the C key are provided for the enci- 
phering/decodSng processing unit 121. 
[0050] As mentioned above, in the data distritmting 
system introducing the C key, a processing unit with a 
construction as shown in Fig. 4 is used as an encipher- 
ing/decoding processing unit 121 on the us a' machine 
102 side in Fig. 3. As shown in Rg. 3. a C key forming 
unit 1 18 to generate the C key and a C key enciphering 
circuit 1 19 for enciphering the data of the contents by 
using the C key formed by the C key forming unit 1 1 8 
are provided on the side of a contents server 101 . The 
other construction is similar to that of the contents 
server 1 shown in Rg. 1 mentioned above. 
[0051] In the foregoing data distributing system of 
onty the M key, the data from the contents input terminal 
13 is compression encoded by the encoder 14 and 
accunuilated as it is in the contents database 1 1 . How- 
ever, in the example shown in Fig. 3, the data from a 
contents input terminal 113 is compression encoded in 
an encoder 114 and. thereafter, sent to the C key enci- 
phering circuit 119, enciphered by the C key encipher- 
ing circuit 1 19 by the C key from the C key forming unit 
118, and accunrtulated into a contents database 111. 
The C key used in the enciphering circuit 119 in this 
instance is stored into the contents database 111. 
[0052] When the user wants to receive the distribu- 
tion of the contents of the contents server 101 , the user 
operates an input unit 122 of the user machine 102 and 
inputs a contents distributing instruction to a machine 
processing manager 124 through a user interface 1 23. 
[0053] When an instruction to get the contents in 
the contents server 101 is received from the input unit 
122, the machine processing manager 124 gives a 
command to the enciphering/decoding processing unit 
121 and inquires the MID code. When the command 
trartsmitted from the machine processing manager 1 24 
is inputted, the encipheringydecoding processing unit 
121 generates the MID code in response to the com- 
mand. 

[0054] When the MID code is received from the 
enciphering/decoding processing unit 121, the machine 
processing manager 124 sends the distributing request, 
MID code, and accounting information to a communica- 
tion manager 1 25. Each information of the distritxiting 
request. MID code, and accounting information is sent 
from the conrtmunication manager 125 to a communica- 
tion manager 1 15 of the contents server 101 through a 
transmission path 103. 



[0055] When the MID code from the user machine 
102 is supplied, the communication manager 115 sends 
the supplied MID code to a server processing manager 
116. The server processing manager 116 sends the 

5 MID code transmitted from the user machine 102 to a 
code arxJ key database 1 12 and transmit a command 
to inquire tiie M key corresponding to tiie transmitted 
MID code. The code and key datat>ase 1 12 generates 
the M key of the equipment corresponding to the MID 

10 code transmitted from the user machine 102. The M key 
outputted from the code and key database 1 12 is sup- 
plied to an M key enciphering circuit 1 1 7. The M key cor- 
responding to the MID code fransmitted from the user 
nrmchine 102 is set into the M key enciphering circuit 

15 117. 

[0056] When the distnlniting request from the user 
nr^chine 102 is received, the server processing man- 
ager 116 serxis the command to distribute tiie 
requested contents to the contents database ill. The 

20 contents database 1 1 1 reads out the data of the con- 
tents corresponding to the distritxiting request of the 
user machine 102 on the basis of the information from 
the server processing manager 116. 
[0057] As mentioned above, the data in the con- 

ss tents database 1 1 1 has been encq?hered t>y the C key 
Therefore, the contents data enciphered by the C key is 
further enciphered by the M key by the M key encipher- 
ing circuit 1 1 7. The C key in this in^nce is read out 
from the contents database 1 1 1 and enciphered by the 

30 M key by the M key enciphering circuit 1 1 7. 

[0058] As mentioned above, the contents data 
which was enciphered by the C key and further enci- 
phered by the M key and tiie C key enciphered by the M 
key are sent from the communication manager 1 15 of 

35 the contents server 101 to the conrtmunication manager 
125 of the user machine 102 through the transmission 
path 103. The contents data which was transmitted from 
the server 101 through the trartsmission path 103 and 
enciphered by the C key and, further, enciphered by the 

40 M key and the C key enciphered by the M key are stored 
into a storage device 120 of the user machine 1 02. 
[0059] As mentioned above, the contents data 
stored in the contents database 1 1 1 has been enci- 
phered by the C key. When the data is transmitted from 

45 the contents server 101 to the user machine 102. the 
data enciphered by the C key is further enciphered by 
the M key Although tiie C key is necessary to decode 
tiie data of the conterrts enciphered by the C key. the C 
key is enciphered by the M key and supplied from the 

50 contents server 101 to the user machine 102. 

[0060] In case of decoding the data of the contents 
stored in the storage device 120, the data of the con- 
tents read out from the storage device 1 20 is supplied to 
a data input terminal DATAJN of the endpher- 

55 ingAiecoding processing unit 121 in Fig. 4. The C key 
enciphered by the M key is read out from the storage 
device 120 and suf^lied to the key input terminal 
KEYJN of the enciphering/decoding processing unit 
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121. 

[0061 } As shown in Rg. 4, the M key peculiar to the 
equipment of the user machine 102 has been stored In 
the M key holder 151 of the enciphering/decoding 
processing unit 121. The data of the contents sent from 
the contents server 101 has been enciphered by the M 
key corresponding to the MID code in the MID code 
holder 152. The M key set in the M key erwaphering cir- 
cuit 1 1 7 on the contents server 101 side is the same as 
that stored In the M key holder 151 . Therefore, in the 
contents data which was enciphered by the C key and, 
further, enciphered by the M key and is supplied from 
the storage device 120. the enciphered portion based 
on the M key can be decoded by the M key decoding cir- 
cuit 153. 

[0062] Similarly, the C key which was enciphered by 
the M key and is supplied from the storage device 1 20 is 
decoded try the M key decocfing circuit 153. 
[0063] Therefore, the data enciphered by the C key 
and the C key are outputted from the M key decoding 
drcuit 153. The C key is supplied to the C key fetching 
circuit 1 55. The data enciphered by the C key is sup- 
plied to the C key decoding circuit 156. The encryption 
by the C key is deciphered tiy the C key decoding circuit 
156 and the data of the contents is decoded. The 
decoded data is outputted from the data output terminal 
DATA_OUT. The C key which is outputted from the C 
key fetohing circuit 155 is outputted from the key output 
terminal KEY_OUT. 

[0064] By enciphering the contents data by the C 
key as mentioned above, when the contents data is 
used, the C key to decode it is certainly necessary. 
Since the data of the contents can be used only by the 
user machine or equipment on the user side having the 
C key, the C key can be used as a key showing the right 
such that the data of the contents can be used. 
[0065] That is, if the C key is sent from a certain 
user machine as one terminal equipment to the other 
user machine as another terminal equipment, this 
means that the data of the contents and the right to use 
the data of the contents are sent. The contents data can 
be used by the terminal equipment on the other user 
side. After the C key was sent from one terminal equip- 
ment to the terminal equipment on the other user side 
as mentioned above, if the C key of the equipment is 
erased, even if the data of the contents remains in the 
equipment on the sending side, the encryption by the C 
key added to the contents data cannot be deciphered, 
so that the contents data cannot be used at alt. In other 
words, it can be regarded that the contents data was 
transferred to the equipment on the other user side or 
the other user. 

[0066] There is a case where the legal user en-one- 
ously erases the contents data or fails in download of 
the contents data. Even in this case, if the C key 
remains in the user machine 102, by allowing the con- 
tents data to be retransmitted from the server 101 artd 
decoding the retransmitted contents data by using the 



remaining C key. the contents data can be used. By 
introducing the C key as mentioned above, the contents 
data can be moved or retransmitted as tollows. The 
charging can be set by using the C key, 

5 [0067] The C key from the key output terminal KEY 
OUT of the enciphering/decoding processing unit 121 
arvj the data enciphered by the C key from the output 
terminal DATA_T of the data are transferred to the user 
machine as equipment on the partner side serving as a 

w movement destination. When the data transfer is fin- 
ished, the C key stored in the C key fetching circuit 155 
and the C key stored in the storage device 120 are 
erased, so that the contents data is moved. With this 
method, the contents data can be used only by the 

15 equipment on the partner side. At this time, it is not 
always necessary to erase the contents data remaining 
in the storage device 120 of the user nnachine serving 
as a moving source side. This is because the contents 
data remaining in the storage device 120 of the user 

20 macftine servirrg as a nrxyving source has been enci- 
phered by the C key arxl. if the C key is erased, the con- 
tents data cannot be decoded, so that it cannot be used 
as contents data. 

[0068] On the contrary to the above case, even 
25 after the data of the contents in the storage device 120 
was erased, K the C key is stored, by allowing the con- 
tents data to be retransnrtrtted from the server 101, the 
contents data can be again used. The retransmission of 
the contents data is performed by processes similar to 
30 tfiose in the case of downloading the contents data 
mentioned above. At this time, whether the new con- 
tents data is distributed, namely, downloaded or not is 
discriminated by the C key and the charging is per- 
formed only in case of the new data. For exarrple, the 
35 user machine 1 02 collates the transmitted C key by the 
coments datatjase ill, thereby discriminating about 
the distribution of the new contents data by checking at 
which time the C key was formed by the C key forming 
unit 118. 

40 [0069] By using the C key, the charging according 
to the contents of the distribution of the contents data 
can be performed as mentioned above. For example, 
the C key can be added only to the toll contents data 
without adding the C key to the toll-free contents data. 

45 On the receiving side, namely, the user nrrachine 102 
side, the machine processing manager 124 discrimi- 
nates whether the C key sent from the server 101 is a 
new key or not. The charging is performed only when it 
is the new C key. By this metfiod, whether the contents 

50 or the data of the contents to be taken out of the server 

1 01 is the toll contents or the toll data of the contents or 
not can be discriminated on the tiasis of the C key which 
is transmitted from the server 101 , so that the toll con- 
tents or the toll data of the contents can be protected. In 

55 case of the retransmission of the data of the contents 
mentioned above, the C key stored in the user machine 

102 and the C key which enciphered the received con- 
tents data are compared. From the result of this com- 
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parison, whether the charging is performed or not can 
be discriminated as mentioned above. Further, rt is also 
possible to form a code from information (for example, 
ranking of the contents or the like) regarding the charg- 
ing, include the formed code into the C key. and change 5 
the fee for the same contents in accordance with the 
conditions. 

[0070] Fig. 5 is a flowchart showing an accounting 
process using the C key. A check is made to see if it has 
been outputted from the key output terminal KEYjOUT 
of the enciphering/decoding processing unrt 121 of the 
user machine 102. that is. the C key has been received 
when the data distributed from the server 1 01 is fetched 
into the storage device 120 of the user machine 102, 
namely, at ^e time of downloading (step SI). If the C 
key is not received, the data of tfie contente distributed 
from the sender 101 is determined to be the toll-free 
corrtents data, and the charging is not performed (st^ 
S2). If the C key is received, whether the C key has 
t>een stored In the storage device 120 or not is discrinv 
inated (step S3). In case of the retransmission of the 
corrtents, since the C key has been stored in the storage 
device 120, whether the received C key and the C key 
stored in the storage device 120 coincide or not is dis- 
criminated (step S4). When the received C key and the 
C key stored in the storage device 120 coincide, sirK^e 
this means the retransmission of the data of the con- 
tents, the charging is not performed (step 82). 
[0071 3 When it is decided in step S3 that the C key 
transmitted from the server 101 is not stored in the stor- 
age device 120 or when it is determined in step S4 that 
the received C key and the C key stored in the storage 
device 120 do not coincide, information of the charging 
rank of the C key is obtained (step S5). The accounting 
process is perfomned in accordance with the information 
of the charging rank (step S6). As charging ranking 
information of the C key, for example, information show- 
ing the kind of data of the contents, quality of the data, 
or the like is considered. 

4. System using the T key 

[0072] As mentioned above, by introducing the C 
key into the data distributing system, the movement of 
the data of the contents between the user machine as 
certain equipment and the user machine as another 
equipment and the retransmission of the contents data 
can be perfomied. However, if only the C key is used, 
the C key is cfirectly transmitted when the contents is 
moved to the equipment on the partner side serving as 
a movement destination. At this time, there is a possibil- 
ity that the C key leaks to the outside and the data of the 
contents cannot be protected. An example in which the 
T key is introduced into the data distritxiting system in 
order to protect the data of the contents at the time of 
data movement will now be described hereinbelow. 
[0073] Rg. 6 shows an example of the data distrib- 
uting system introducing the T key In Fig. 6, a user 



macWne 202 A on the sending side of the data is con- 
structed by a storage device 220A. an encipher- 
ing/decoding processing unit 221 A. an input unit 222 A. 
a user interface 223A, a machine processing manager 
224A, a communication manager 225A. and a card 
reader/writer 227A in a manner similar to the user 
macNne 102 of the data distributing system shown in 
Fig. 3 mentioned above. A card 226 A similar to a card 
126 which is used in the data distritxiting system shown 
in Rg. 3 mentioned abme is k)aded into the card 
readerAwriter 227A. 

[0074] Like a user machine 202A mentioned above, 
a user machine 202B on the receiving side of the data is 
constiucted t>y a storage device 220 B, an erx;ipher- 
ingMecoding processing unit 2218, an input unit 2228, 
a user irnerface 2238, a machine processing manager 
2248. a communication manager 2258, and a card 
readerAvriter 227B In a manner similar to the user 
machine 102 of the data distributing system shown in 
Fig. 3 mentioned above. A card 226B similar to the fore- 
going card 226 A is loaded into the card reader/writer 
2278. 

[0075] In the data transfer system introducing the T 
key, processing units as shown in Rg. 7 are used as 
enciphering/decoding processing units 221 A arxl 221 B. 
As shown in Rg. 7, an M key holder 251, an MID code 
holder 252, an M key decoding circuit 253, a controller 
254, a C key fetching circuit 255, and a C key decoding 
circuit 256 are provided in each of the encipher- 
ing/decoding processing units 221 A and 221 8. A T key 
enciphering circuit 257, T key forming circuits 258 arxJ 
259, a T key decoding circuit 260, and an M key enci- 
phering drcutt 261 are also provided. 
[00761 The operations of the M key hokJer 251 , MID 
code holder 252, M key decoding circuit 253, and con- 
ti-dler 254 are similar to tiiose of the enciphering/decod- 
ing processing units 21 and 121 of the user machines 2 
and 102 in the foregoing data distributing system. The 
M key as enciphering information that is peculiar to the 
equipment of each user machine is stored in the M key 
holder 251 at the time of shipment from the factory The 
MID code as identification information that is peculiar to 
each equipment is stored in the MID code holder 252 at 
the time of shipment from the factory. The controller 254 
controls Uie operations of ^e enciphering/decoding 
processing units 221 A arxl 221 B. The C key fetching cir- 
cuit 255 holds the C key decoded by the decryption of 
the M key. The C key decoding circuit 256 performs the 
decoding process of the C key. 

[0077] The T key enciphering circuit 257 enciphers 
the data which is moved from the user machine 202 A 
serving as certain equipment to the other user machine 
2028 serving as another equipment by the T key from 
the T key forming circuit 258. The T key decoding circuit 
260 decodes tiie moved data by the T key from the T 
key forming circuit 259. Each of the T key forming cir- 
cuits 258 and 259 forms the T key on the basis of the 
MID code. 
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[0078] Rgs. 8A and 8B are diagrams for explaining 
the operations of the enciphering/decoding processing 
units 221 A and 221 B when the data of the contents is 
mowed from the user machine 202A to the user machine 
202B. 

[0079] When the data of the contertts is moved from 
the user machine 202A to the user machine 202B. a 
transferring request of the MID code is sent from the 
user machine 202A on the serKling side of the data to 
the user machine 202B on the partner side. 
[0080] in the user machine 202B on the partner 
side, when a transmitting request of the MID code is 
received, the MID code is called from an MID code 
holder 252B of the enciphering/decoding processing 
unit 221 B of the user machine 202B. the MID code read 
out from the MID code holder 252B is outputted from the 
code output terminal MID_OUT. and the MID code is 
transmitted from the user machine 202 B to the user 
machine 202A. 

[0081 ] In the user machine 202A on the data send- 
ing side, when the MID code transmitted from the user 
machine 202B on the partner side is received from a 
code input terminal MID_IN, the received MID code is 
supplied to a T key forming circuit 258A. The T key 
forming drcurt 258A forms the T key on the basis of the 
MID code sent from the user machine 2028 on the part- 
ner side. The T key formed by the T key forming circuit 
258A is supplied to a T key enciphering circuit 257 A. 
[0082] The user machine 202A receives the MID 
code from the user machine 202B. When the T key is 
formed on the basis of the MID code received in the T 
key forming circuit 258 A and supplied to the T key enci- 
phering circuit 257A, the operation to transmit the con- 
tents data and the C key from the user machine 202A to 
the user machine 202B is started. 
[0083] The contents data which was enciphered by 
the C key and. further, enciphered by the M key and the 
C key enciphered by the M key have been stored in the 
storage device 220A of the user machine 202A. There- 
fore, when the contents data and the C key are transmit- 
ted from the user machine 202 A to the user machine 
202 B, the contents data which was enciphered by the C 
key and, further, enciphered by the M key and the C key 
enciphered by the M key are supplied from the storage 
device 220 A of the user machine 202 A to the key input 
terminal KEYJN and data input terminal DATA_IN of 
the enciphering/decoding processing unit 221 A. 
[0084] The M key is supplied from an M key holder 
251 A to an M key decoding circuit 253A. In the M key 
decoding circuit 253 A, the decoding process of the 
encryption performed on the basis of the M key is exe- 
cuted by the M key from the M key holder 251 A. The 
decoded C key and the contents data enciphered by the 
C key are outputted from the M key decocfing circuit 
253A. The C key which is outputted from the decoding 
circuit 253A is supplied to a C key fetching circuit 255A 
and supplied to the T key enciphering circuit 257A. The 
contents data enciphered tiy the C key which is output- 



ted from the decoding circuit 253A is supplied to a C key 
decoding circuit 256A arxl supplied to the T key enci- 
phering circuit 257 A. 

[0085] In the C key decoding circuit 256A. a decod- 

5 ing process of the data of the contents erniphered by 
the C key which is supplied from the decoding circuit 
253 A is performed and a decoding process of ^e 
encryption based on the C key performed to the data of 
the contents is performed. The decoded conterrts data 

w is outputted from the data output terminal DATA_OLrr. 
[0086] The T key formed in the T key forming circuit 
258A on the basis of tfie MID code of the user machine 
202 B is set into the T key enciphering circuit 257 A. The 
C key and the contents data enciphered by the C key 

15 which are outputted from the M key decoding circuit 
253 A are enciphered by the T key formed on the basis 
of the MID code of the user machine 202B on the part- 
n&f side by the T key enciphering circuit 257 A. There- 
fore, the C key enciphered by the T key and the contents 

20 data wrhich was enciphered by the C key and. further, 
enciphered by the T key are outputted from the T key 
enciphering circuit 257A. 

[0087] The C key enciphered by the T key and the 
contents data which was enciphered by the C key arvl. 

25 further, enciphe-ed by the T key are outputted from a 
key output terminaJ TKEYjOUT and a data output ter- 
minal TDATA_OUT. sent to the user machine 202B on 
tfie partner side, inputted to a key input terminal 
RCKEYJN and a data input terminal RDATAJN of the 

30 enciphering/decoding processing unit 221B of the user 
machine 202 B on the partner side, and supplied to a T 
key decodng circuit 260 B. At a point when the transmis- 
sion of the C key enciphered by the T key and the con- 
tents data enciphered by the C key arxl the T key to the 

35 user machine 2026 is completed, the C key stored in 
the storage device 220 A of the user rrtachine 202A is 
deleted and the reading of the contents data from the 
storage device is inhibited. 

[0088] The T key is supplied from a T key forming 

40 circuit 259B to the T key decoding circuit 260B. The T 
key is formed in the T key forming circuit 259B on the 
basis of the MID code from the MID code holder 252B. 
[0089] In the user machine 202 A on the sending 
side, the MID code which is transmitted from the user 

45 machine 202B is received and the T key is formed in the 
T key forming circuit 258A on the basis of the received 
MID code. In the T key decoding circuit 260B of the user 
machine 202B on the receiving side, the T key is formed 
on the basis of the MID code from the MID code holder 

50 252B. The same MID code is sent to the T key forming 
circuits 258 A and 259B. Therefore, the contents data 
and C key which had been enciphered by the T key arvJ 
sent from the user machine 202 A can be decoded by 
the T key decoding circuit 260B of the user machine 

55 202B. 

[OOSO] The C key and the data of the contents enci- 
phered by the C key are outputted from the T key 
decoding circuit 260 B. The C key and the data of the 
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contents enciphefed by the C key are supplied to an M 
key enciphering circuit 261 B. 

[0091 ] The M key peculiar to the equipment of the 
user machine 202B is sent from an M key hoMer 251 B 
to the M key enciphering circuit 261 B. The C key and 
the data of the contents enciphered by the C key are 
enciphered on the basis of the M key read out from the 
M key hokJer 251 B. Therefore, the C key enciphered by 
the M key and the data of the contents which was enci- 
phered by the C key and, further, enciphered by the M 
key are outputted from the M key enciphering drcurt 
261 B. The C key enciphered by the M key and the data 
of the contents which was erxsphered by the C key and, 
further, enciphered by the M key which are outputted 
from the M key enciphering circuit 26 IB are outputted 
from a key output terminal RKEY_OUT and a data out- 
put terminal RDATA_OUT, respectively, and stored into 
the storage device 220B of the user machine 202B. 
[0092] As mentioned atwve. by using the T key, 
when the data is moved from the user machine 202A to 
the user machine 202 B, the C key and the contents data 
enciphered l>y the C key which are transmitted from the 
user machine 202A to the user machine 2028 are fur- 
ther enciphered by the T key. Therefore, the C key as an 
enciphering key does not leak to the outside and the 
data of the contents can be protected. 

5. System using a DA code 

[0093] As mentioned above, by introducing the T 
key to the data distributing system, when the data is 
moved between the user machine serving as certain 
equipment and the user machine serving as another 
equipment, the data can be protected. However, as 
mentioned above, even if Vne T key is introduced, the 
data can be moved in the same equipment. For exam- 
ple, after the C key was temporarily stored in another 
location in the same user machine, for example, in 
another storing unit, if the data of the contents is moved 
and. thereafter, the C key is returned to the original loca- 
tion, although the C key is erased due to the nrxjvement 
of the contents data, since the C key has separately 
been stored in another location, the contents data is ille- 
gally copied by using the stored C key. 
[0094] Therefore, a method whereby a code (called 
a DA code) which dynamically changes with the elapse 
of time is added to the C key and an element which 
changes with respect to time is provided for the C key is 
considered. A data distributing system using the C key 
having the element which changes with respect to time 
will now be described hereinbelow with refererwe to Rg. 
9 and sut)sequent drawings. 

[0095] That is. in Fig. 9, in a manner similar to the 
foregoing user machine 102 shown in Rg. 3 except for a 
C key storing memory 330, a user machine 302 is con- 
structed by: a storage device 320; an encipher- 
ing/decoding processing unit 321; an input unit 322; a 
user interface 323; a machine processing manager 324; 



a communication manager 325; and a card 
reader/writer 327. A card 326 similar to the card 126 
shown in Rg. 3 mentioned above is loaded into the card 
readerMriter 327. 

5 [0096] In such a user machine 302, for example, it 
is now assumed that the C key is read out from the stor- 
age device 320. the C key read out from the storage 
device 320 is stored into the C key storing memory 330. 
and tiiereafter. data of contents in the storage device 

10 320 is moved to another user machine serving as 
another equipment, tn this case, when the nrtovement of 
the contents data is finished, although the C key in the 
storage device 320 is erased, since the C key has been 
shunted to the C key storing memory 330, the C key in 

15 the memory 330 is not erased. After that by returning 
the C key from the C key storing memory 330 to the 
storage device 320. if the data of the contents remains 
in the storage device 320. the contents data which 
ought to have been moved to the other user machine 

20 can be decoded. Further, even if no contents data exists 
in the storage device 320. when there is the C key. tfie 
retransmission of the contents data can be requested 
from the oontKits server 1 as mentioned above. The 
contents data can be illegally used. 

25 [0097] In the present data distributing system, 
therefore, as shovm in Rg. 10, a DA code which dynam- 
ically changes with the elapse of time is added to the C 
key. A time code or random numbers are used as a DA 
code. By adding the DA code to the C key as mentioned 

30 above, the illegal use of tfie contents data as mentioned 
atxjve can be prevented. 

[0098] Rg. 1 1 shows a construction of the encipher- 
ing/decoding processing unit 321 to handle the C key to 
which the DA code shown in Rg. 10 was added. In a 

35 manner simitar to the enciphering/decoding processing 
units 221 A and 22 1B shown in Rg. 7, the encipher- 
ing/decoding processing unit 321 has: an M key hoMer 
351 ; an MID code holder 352; an M key decoding circuit 
353; a corrtroller 354; a C key fetching circuit 355; a C 

40 key decocfing circuit 356; a T key enciphering circuit 
357; T key forming circuits 358 and 359: a T key decod- 
ing circuit 360; and an M key enciphering circuit 361. A 
DA code managing circuit 362 is also provkJed. 
[0099] The DA code managing circuit 362 manages 

45 the DA code which is added to the C key. That is. the DA 
code managing circuit 362 calls the C key from the stor- 
age device 320 every predetermined time. When the C 
key is called, the DA code of the C key is checked. If the 
DA code is correct, an updating process of the DA code 

so is performed. 

[0100] The C key enciphered by the M key has 
been stored in the storage device 320. Therefore, the C 
key enciphered by the 14 key is first serrt from the key 
input terminal KEY_tN to the M key decoding circuit 353 

55 and a decoding process of the encr^on performed on 
the basis of ^e M key is performed. The decoded C key 
is outputted from the M key decoding circuit 353. This C 
key is sent to the DA code managing circuit 362. 
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[0101] The DA code managing circuit 362 detects 
the DA code of the C key which is supplied from the 
decocfing circuit 353 every predetemnined time and 6is- 
crtmtnates whether the DA code which was correctly 
updated has been added to the C key or not. If the DA 
code added to the C key is a DA code which was cor- 
rectly updated, the updating of the DA code is per- 
formed. The C key in which the DA code was updated is 
supplied to the M key endphOTng circuit 361 . the enci- 
phering process is again performed on the basis of the 
M key. and the enciphered C key is again stored into the 
storage de^ce 320. In case of a time code of the DA 
code added to the C key. it is also possible to perform 
the updating of the DA code by discriminating whether 
the time code has changed in accordance with a prede- 
termined rule or not. It is also possible to discriminate it 
on the basts of a method which is used in step SI 3. 
which will be explained hereintater. 
[0102] Rg. 12 is a flowchart showing processes of 
the DA code managing circuit 362. In Fig. 12, whether a 
predetermined time has elapsed or not is discriminated 
by, for examf^e, a timer function of tfte controller 354 or 
DA code managing circuit 362 (step S11). When the 
predetermined time elapses, the C key is read out from 
the storage device 320 and decoded by the decoding 
circuit 353 and the DA code added to the decoded C key 
is detected (step S12). Whether the DA code read out 
from the storage device 320 is the DA code which was 
correctly updated or not is disaimlnated (step S13). 
The discrimination about whether the DA code has cor- 
rectly been updated or not in step SI 3 can be made by 
checking whether the DA code held in the encipher- 
ing/decoding processing unit 321 and the DA code read 
out from the storage device 320 coincide or not. If it is 
determined in step Si 3 that the DA code is the DA code 
which was correctly updated, this DA code is updated to 
the next DA code. The C key to which the updated DA 
code has been added is again subjected to an encipher- 
ing process on the basis of the M key by the M key enci- 
phering circuit 361 and returned to the storage device 
320 (step SI 4). 

[0103] tf It is determined in step S13 that the 
detected DA code is not the DA code which was cor- 
rectly updated, the C key in tfie storage device 320 is 
erased or a code indicative of the illegal use is added to 
the C key and the use of the data of the contents corre- 
sponding to the C key which was determined that the 
DA code is not correctly updated is inhibited (step Si 5). 
[0104] As merrtioned akxwe, when the C key in the 
storage device 320 is norrrally handled, the DA code 
which is added to the C key is always updated e^^ry 
predetermined time by the DA code managing circuit 
362, arxi the C key to which the updated DA code was 
added is stored into the storage device 320. 
[0105] For example, in the case where the C key 
was stored in the C key storing memory 330 in Fig. 9. 
since tiie DA code of the C key stored in the C Key stor- 
ing memory 330 is not updated as mentioned above, it 



is determined in the DA code managing circuit 362 tfiat 
the DA code is not correct. Thus, it is possible to prevent 
a situation such that the C key is once stored in the 
memory 330 and the data of the contents is moved and 
5 the data of the contents is illegally used by using the C 
code stored in the merrory 330 after the rrKTvement as 
mentioned above. 

[01 06] As mentioned above, by using the DA code 
which dynamically changes, the reproduction can be 
10 inhibited or permitted for a certain period of time, tf it is 
used, the contents can be lent for a predetermined 
period of time or a trial period can be set in the use of 
the contents. 

[0107] Fig. 13 is a flowchart showing processes in 

IS case of setting such that data of contents can be repro- 
duced only for a predetermined period of time by using 
the C key having the DA code which dyn^ically 
changes as mentioned above. In the case shown in Fig. 
13. a time code is used as a DA code. Term information 

80 is further added to the DA code of the C key. 

[0108] In Rg. 13. whether a predetermined time 
has elapsed or not is discriminated (step S21 ) in a man- 
ner similar to step 811 mentioned above. When the pre- 
determined time elapses, the C key stored in tiie 

25 storage device 320 is called. The DA code added to the 
C key is detected (step S22) in a manner similar to step 
812 mentioned above. Whether the DA code has cor- 
rectiy been updated or not is discriminated (step S23). If 
it is determined in step S23 that the DA code has cor- 

30 recti y been updated, this DA code is updated to the next 
DA code by the DA code managing circuit 362 (step 
S24). The term information added to the updated DA 
code is compared with the term information showing a 
use term of tiie contents data arxf hekl in a DA code 

35 management code, thereby discriminating whether the 
term of the C key has expired tiie use term or rx>t (step 
825). tf the term of the C key does not expire the use 
term, tiie C key to which this updated DA code was 
added is returned to the storage device 320 (step 826). 

40 The processing routine is returned to step S21 . 

[01 09] If it is decided in step S23 that tiie DA code 
called from the storage device 320 is not the DA code 
which was correctly updated, the C key is deleted from 
the storage device 320 or a code indicative of the illegal 

45 use is added to tiie C key. tiiereby disabling the use of 
the data of the contents corresponding to the C key 
which was decided that the DA code is not correctly 
updated (step 826). When H is determined in step S25 
that the term of the C key has expired the use term, step 

so S26 follows. The C key is deleted from the storage 
device 320 or a code indicative of the illegal use is 
added to the C key, tiiereby disabling the use of the data 
of the contents corresponding to the C key which was 
decided that the term has expired the use term in a 

55 mann^^ similar to the atxive. 

[01 10] As mentioned above, the reproduction of the 
data of tiie contents can be inhibited or permitted only 
for a certain period of time by using the DA code. Thus, 
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the user can reproduce the contents data by providing a 
trial period. Further, in the case where the contents data 
is moved from one user machine to the other user 
machine, if the C key of one user machine is set so as 
to inhitxt the reproduction until a predetermined term by 5 
the DA code and the C key of tfie other user machine Is 
set so that the data can be reproduced only for such a 
period of time, it is possible to control the system so as 
to lend the data of the contents from one machine to the 
other machine only for a predetermined period of time. 10 
[0111] According to the invention, the contents 
which is stored in the contents server has been enci- 
phered by the C key As mentioned above, by providing 
the C key the contents can be moved arxl the retrans- 
nrussion can be requested. By discriminating whether 15 
the same C key as the transmitted C key has been 
stored in the storage device or rtot, whether the retrans- 
mission is performed or not is discriminated artd the 
proper charging can be performed, or by ranking the C 
key, the charging can be performed while the fee is 20 
changed every contents. 

[0112] According to the invention, the DA code 
which dynamically changes with the elapse of time is 
added to the C key. By adding such a DA code, a situa- 
tion that the C key is shunted and the contents is ille- 2s 
gaily used can be prevented. By using the DA code 
which dynamically conges with the elapse of time, a 
limit can be provided for the use period of the contents 
or the contents can be lent or borrowed for a predeter- 
mined period. 30 

Industrial Applicability 

[0113] As mentioned above, the data distributing 
apparatus and the terminal apparatus for data distribu- as 
tion according to the invention are suitable for use in, for 
example, the information distributing system compris- 
ing: the contents server in which a plurality of music 
data is accumulated; and a user machine to which 
desired contents is distributed from the contents accu- 40 
mulated In the contents server. 

1, 101... CONTENTS SERVER 

2. 102, 202A, 202B, 302... USER MACHINE 

20, 120. 220A. 220B, 320... STORAGE DEVICE 45 

21. 121. 221A, 221B, 321... ENCIPHER- 
ING/DECODING PROCESSING CHIP 

Claims 

50 

1 . A data distributing apparatus comprising : 

a first storing unit in which first identification 
data that is peculiar to equipment and second 
identification data corresponding to said first 55 
iderrtification data have been stored; 
a first transmitting/receiving unit for transmitting 
distribution request data of data together with 



said first tderrtrfication cteta read out from said 
first storing unit and receiving the transmitted 
data: 

a first data storing unit for storing the data 
received by said first transmttttng/receiving 
unit: 

a first signal processing unit for performing a 
decoding process to the date read out from 
said first data storing unit on the base of said 
second identification data stored in said first 
storing unit; 

a first control unit for performing an operation to 
allow the data received by said first transmit- 
ting/^ecei^'ng unit to be stored into said first 
data storing unit and controlling the decoding 
processing operation by said first signal 
processing unit of the data read out from said 
first data storing unit; 

a second transmittingyireceiving unit for receiv- 
ing said first Identtf ication data and said distri- 
butk>n request data which were transnrutted 
from said first transmitting/receiving unit and 
transmitting the data; 

a second data storing unit In which a plurality of 
data is stored and which outputs data cone- 
sponding to said distritxjtion request data; 
a second storing unit in which the secorKl iden- 
tification data corresponding to said transmit- 
ted first identification data has been stored: 
a second signal processing unit for performing 
an erx^tphering process to the data outputted 
from said second data storing unit on the basis 
of the second identification data read out from 
said second storing unit; and 
a second control unit for performing a reading 
control of said second klentification data from 
said second storing unit on the basis of said 
distribution request data and said first identifi- 
cation data which were transmitted and per- 
forming a reading control of the data from said 
second data storing unit on the basis of said 
distribution request data, 
wherein the data enciphered on the basis of 
said second identification data transmitted 
through said second transmitting/receiving unit 
is decoded by said first signal processing unit. 

2. A data distrftxjting apparatus according to claim 1 . 
wherein accounting Information Is transmitted from 
said first transmitting/receiving unit to said secorxf 
transmitting/receiving unit, and said second control 
unit controls the reading operation of said second 
identification data from said second storing unit on 
the tiasis of said transmitted accounting informa- 
tion. 

3. A data distributing apparatus according to dalm 1 . 
further comprising enciphering processing means 
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for performing an enciphering process to the data 
which is written into said second data storing unit 
on the basis of said enciphering data, and wheren 
the data enciphered tiy said enciphering processing 
means is written into said second data storing unit 
and when the data is read out from said second 
data storing unit on the basis of said distribution 
request data arxl transmitted from said second 
transmitting/receiving unit to said first transmit- 
tingA^eceiving unit, said enciphering data is enci- 
phered by said second identification data by sad 
second signal processing unit and transmitted 
together with the data read out from said second 
data storing unit. 

4. A data distributing apparatus according to claim 3, 
wherein said first signal processing unit decodes 
the data transmitted from said second transmit- 
ting/receiving unit and said enciphering data by 
said second identification data stored in said first 
storing unit artd performs a decoding process of an 
encryption performed by said enciphering data to 
the data decoded on the basis of the decoded enci- 
phering data. 

5. A data distributing apparatus according to daim 3. 
wherein said first control unit performs an account- 
ing process on the basis of said enciphering data. 

6. A data distributing apparatus according to daim 4. 
v^erein said enciphering data has a data portion 
which dynamically changes, and said first control 
unit discriminates said dynamically changing data 
portion, at every predetermined time, in said enci- 
phering data stored in said first data storing unit 
and transmitted together with the data from said 
second transmitting/receiving unit 

7. A data distritsuting apparatus according to daim 6, 
wherein said first control unit controls the reading 
operation of the data stored in said first data storing 
unit on the basis of a discrimination result of said 
dynamically changing data portion. 

8. A data distributing apparatus according to daim 7, 
wherein said first control unit inhibits the reading 
operation of at least the data from said first data 
storing unit when the discrimination result of said 
dynamically changing data portion irvlicates that 
said enciphering data Is not correct 

9. A data distributing apparatus according to daim 4, 
wherein said enciphering data has a data pxirtion 
which time-deperxJentty changes, and said first 
control unit discriminates said time-dependently 
changing data portion, at every predetermined 
time, in said endphering data stored in said first 
data storing unit and transmitted together with the 



data from said second transmitb'ng/receiving unit. 

ia A data distritxjting apparatus according to claim 9, 
wherein said first control unit controls the reading 
5 operation of the data stared in said first data storing 

unit on the basis of a discrimination result of said 
timeKJependentiy changing data portion. 

1 1 . A data distnlxiting apparatus according to daim 1 0, 
70 wherein Sciid first control unit inhibits the reading 

operation of at least the data from said first data 
storing unit when the discrimination result of said 
time-dependently changir>g data portion indicates 
tiiat a predetermined time has elapsed. 

15 

12. A data distributing apparatus according to daim 4, 
further comprising a signal processing unit for fur- 
ther performing an endphering process to the data 
decoded by said first signal processing unit on the 

20 basis of first id^itification data of a destination to 
which the data is to be nnoved when the data stored 
in said first data storing unit is moved. 

1 3. A data distributing apparatus according to claim 1 2, 
25 wherein said first control unit deletes said endpher- 
ing data stored in said first data storing unit at a 
point when the movement of the data stored in said 
first data storing unit Is finished. 

30 14. A data distributing apparatus comprising: 

at least one terminal equipment section having 
a first storing unit in which first identification 
data that is peculiar to equipment and second 

35 identification data corresponding to said first 

identification data have been stored, a first 
transmitting/receiving unit for transmitting dis- 
tribution request data of data together with said 
first identification data read out from said first 

40 Storing unit and receiving the transmitted data. 

a first data storing unit for storing the data 
received by said first transmitting/receiving 
unit, a first signal processing unit for performing 
a decoding process to the data read out from 

45 said first data storing unit on the basis of said 

second identification data stored in said first 
storing unit a first control unit for performing an 
operation to allow the data received by said first 
transmitting/receiving unit to be stored into said 

50 first data storing unit and controlling the decod- 

ing processing operation by said first signal 
processing unit of the data read out from said 
first data storing unit; and 
a server apparatus section having a second 

55 transmitting/receiving unit, connected to said 

terminal equipment section through a transmis- 
sion path, for receiving said first identification 
data and said distiibution request data which 
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were transmrtted from said first fransmit- 
ting/receiving unit and transmitting the data, a 
second data storing unit in which a plurality of 
data is stored and which outputs da^ corre- 
sponding to said distribution request data, a 
seoond storing unit in whidi the second identi- 
fication data corresponding to said transmitled 
first identification data has been stored, a sec- 
ond signal processing unit for performing an 
enciphering process to the data outputted from 
said second data storing unit on the basts of 
the second identification data read out from 
said second storing unit, and a second control 
unit for performir>g a reading corrtrol of said 
second identification data from said second 
storing unit on the basis of said distribution 
request data and said first identification data 
which were transmitted and performing a read- 
ing control of the data from said second data 
storing unit on the basis of said distribution 
request data, 

wherein the data enciphered on the basis of 
said second identification data transmitted 
through said secorxl transmitting/receiving unit 
is decoded by said first signal processing unit. 

15. A data distributing apparatus according to daim 14, 
wherein accounting information is transmitted from 
said first transmitting/receiving unit to said second 
transmitting/receiving unit and said secorxJ control 
unit controls the reading operation of said second 
identification data from said secorvl storing unit on 
the basis of said transmitted accounting informa- 
tion. 

1 6. A data distributing apparatus according to daim 14, 
further comprising enciphering processing means 
for performing an endptiering process to the data 
which is written into said second data storing unit 
on the basis of said enciphering data, and wherein 
the data enciphered by said endphering processing 
means is written into said second data storing urdt, 
and when the data is read out from said second 
data storing unit on the basts of said distribution 
request data and transmitted from said second 
transmitting/receiving unit to said first transmit- 
ting/receiving unit, said endphering data is enci- 
phered by said secorxJ identification data by said 
second signal processing unit and transmitted 
together with the data read out from said second 
data storing unit 

17. A data distributing apparatus according to daim 16. 
wherein said first signal processing unit decodes 
the data transmitted from said second transmit- 
ting/receiving unit and said enciphering data by 
said second iderrtification data stored in said first 
storing unit and perfonre a decoding process of an 



encryption performed by said enciphering data to 
the data decoded on the basts of the decoded ervi- 
phering data. 

5 1 a A data distrftxjting apparatus according to daim 1 6, 
wherein said first control unit pertomis an account- 
ing process on the basis of said enciphering data. 

1 9. A data distributing apparatus according to daim 1 6, 
10 wherein said endphering data has a data portion 

wfiich dynamically changes, and said first control 
unit discriminates said dynamically changing data 
portion, at every predetermined time, in said end- 
phering data stored in said first data storing unit 
15 and transmitted toge^er with the data from said 
second transrrtitti rig/receiving unit. 

20. A data distributing apparatus according to daim 1 9. 
wherein said first control unit controls the reading 

20 operation of the data stored in said first data storing 
unit on the basts of a discrimination result of said 
dynamically changing data portion. 

21. A data distributing apparatus according to daim 20. 
25 wherein said first contrd unit inhibits the reading 

operation of at least the data from said first data 
storing unit when the discrimination result of said 
dynamically changing data portion indicates that 
said endphering data is not correct. 

30 

22. A data distrSxjting apparatus according to daim 1 6. 
wherein said endphaing data has a data portion 
wttich time-dependentiy changes, and said first 
corrtrol unit discriminates said time-dependently 

35 changing data portion, at every predetermined 
time, in said enciphering data stored in said first 
data storing unit and transmitted together with the 
data from said second transmitting/receiving unit. 

40 23. A data distributing apparatus according to daim 22. 
wherein said first control unit corrtrds the reading 
operation of the data stored in said first data storing 
unit on the basis of a discrimination result of said 
time-dependentiy changing data portion. 

45 

24. A data distributing apparatus according to daim 23, 
wherein said first contrd unit inhbits the reading 
operation of at least the data from said first data 
storing unit when the discrimination result of said 

50 time-dependently changing data portion indicates 
that a predetermined time has elapsed. 

25. A data distributing apparatus according to daim 1 6, 
further comprising a signal processing unit for fur- 

ss ther performing an endphering process to the data 
decoded by said first signal processing unit on the 
basis of first iderrtification data of another terminal 
equipment section of a destination to which the 
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data, is to be moved when the data stored tn said 
first date storing unit ts moved to said ano^er termi- 
nal equipment section. 

26. A data distritxiting apparatus according to daim 25, 
wherein said first control unit deletes said ertcipher- 
ing data stored in said first data storing unit at a 
point when the movement of the data stored in said 
first data storing unit ts finished. 

27. A terminal apparatus for data cGstribution. compris- 
ing: 

a storing unit in which first identification data 
that is peculiar to an a;^ratus and second 
identrfication data corresporxling to said first 
identification data have been stored; 
a data transmitting/receiving unit for transmit- 
ting distribution request data of data together 
with said first identification data read out from 
said storing unit and receiving data which was 
enciphered by said second identification data 
and transmitted; 

a data storing unit for storing the data which 
was enciphered on ^e t>asis of said second 
identrfication data and received by said data 
transmitting/recerving unit: 
a signal processing unit for performing a 
decoding process to the data read out from 
said data storing unit on the basis of said sec- 
ond identification data stored in said storing 
unit; and 

a control unit for performing the operation to 
store the data received by said data transmit- 
ting/receiving unit into said data storing unit 
and controlling the decoding processing opera- 
tion by said signal processing unit of the data 
read out from said data storing unit 

28. A terminal apparatus for data distribution according 
to claim 27, wherein the data received by said data 
transmitting/recerving unit and enciphering data 
serving as a source of encipherment performed to 
said data have been stored in said data storing unit 
and said signal processing unit decodes the data 
read out from said data storing unit by said second 
identification data stored In said first storing unit 
and performs a decoding process of an encryption 
performed by said enciphering data to the data 
decoded on the t>asis of the decoded enciphering 
data. 

29. A ternrtina! apparatus for data distribution according 
to claim 28, wherein said control unit performs an 
accounting process on the basts of said encipher- 
ing data. 

30. A terminal apparatus for data distribution according 



to daim 28. ^A^erein said encash ering data has a 
data portion which dynamically changes, and said 
control unit discriminates said dynamically chang- 
ing data portion, at every predetermined time. In 
5 said enciphering data stored In said data storing 

unit together with the data. 

31 . A terminal apparatus for data distnlsution according 
to daim 30, wherein said control unit corttrols the 

10 reading operation of the data stored in said data 
storing unit on the basis of a cfiscriminatton result of 
said dynamically changing data portion. 

32. A terminal apparatus for data distribution according 
15 to claim 31, wherein said control unit Inhibits the 

reading operation of at least the data from said data 
storing unit when the discrimination result of said 
dynamically changing data portion indicates that 
said enciphering data is not correct. 

so 

33. A terminal apparatus for data distntiution according 
to daim 28, wheran said enciphering data has a 
data portion which time-depend ently changes, and 
said control unit discriminates said time-depend- 

25 &nly changing data portion, at every predeter- 
mined time, in said endphering data stored in said 
data storing unit together with the data. 

34. A terminal apparatus for data distribution according 
30 to daim 30, wheren said control unit controls the 

reading operation of the data stored in said data 
storirrg unit on tiie basis of a discrimination result of 
said time-dependently ctianging data portion. 

35 35. A terminal apparatus for data distribution according 
to claim 31, wherein said control unit inhibits the 
reading operation of at least the data from said data 
storing unit when the discrimination result of said 
time-der>endentiy changing data portion indicates 

40 that a predetermined time has elapsed. 

36. A terminal apparatus for data distribution according 
to daim 28, furtiier comprising a signal processing 
unit for further performing an enciphering process 
45 to the data decoded by said signal processing unit 
on the basis of the first identification data of a des- 
tination to which the data is moved when the data 
stored in said data storing unit is moved, 

50 37. A terminal apparatus for data distribution according 
to daim 36, wherein said control unit deletes said 
enciphering data stored in said data storing unit at 
a pdnt when the nrK)vement of the date stored In 
said data storing unit is finished. 

53 
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Fig. 2 
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Fig. 4 



DATA IN 



MID OUT 



f 



153 



MKEY 
DECODING 



CMD 121 
154 



i 



MID CODE 
HOLDER 




CONTROLLER 


151 

} 


155 

? 


MKEY 
HOLDER 




C KEY 





156 



CKEY 
DECODING 



KEY OUT 



DATA T 



DATA OUT 



21 



EP 0 996 074 A1 



Fig. 5 
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Fig. 8A 
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Fig. 8B 
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Fig. 9 
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Fig. 11 



MID OUT 



KEYJN 
DATA IN 



RKEY.OUT 
ROATA OUT- 



1 



352 



MID CODE 
HOLDER 



351 



M KEY 
HOLDER 



353 




M KEY 
OECOOlNGl 




DA CODE 
MANAGING 




354 



CMD 



CONTROLLER 



355 



358 



C KEY 
FETCHING 



C KEY 
DECODING 



356 



T KEY 
FORMING 



T K 
FORI 


EY 1 
^tNG 1 




r 


TKEY 
ENCtPHERlNC 



MID IN 




357 



359 



TKEY,©^! 
TDATA OUT 



DATA OUT 



360 



TKEY 
DECODING 



RCKEYJN 
ROATA_IN 



28 



EP 0 996 074 A1 



Fig. 12 
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Fig. 13 
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